Remove nobody from owner whitelist — not useful for folder ownership

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

app.py

@@ -760,7 +760,7 @@ def set_permissions():
 # ===== GROUPS =====
 
 _GROUP_WHITELIST = {'root', 'staff', 'sambashare', 'www-data'}
-_USER_WHITELIST  = {'www-data', 'nobody'}   # system accounts useful as folder owners
+_USER_WHITELIST  = {'www-data'}   # system accounts useful as folder owners
 
 
 def _list_groups():